---
title: "Get IoC Metadata with or without Artilces"
method: GET
path: "/entities/{entityId}"
tags: ["Entities"]
---

# Get IoC Metadata with or without Artilces

`GET /entities/{entityId}`

Retrieves detailed information about a specific IoC, including statistics, relationships, and export options

## Path parameters

- `entityId` string, required

## Query parameters

- `withStats` boolean

## Response `200`

Successfully retrieved entity details

- EntityDetails
  - `enterpriseFeatures` string[] — List of enterprise features associated with this entity
  - `hasSalience` boolean — Indicates if the entity has salience information
  - `id` string — Unique identifier for the entity
  - `iocDetails` IOCDetails
    - `exports` Export[] — Available export formats for the IOC
      - `type` 'markdown' | 'stix2.1' | 'misp' | 'csv' — Export format type
      - `url` string, uri — URL to download the export file
    - `subtype` string — Subtype of the IOC (e.g., md5, sha256, ip, domain)
    - `type` string — Type of IOC (e.g., hash, ip, domain, url)
  - `label` string — Human-readable label for the entity
  - `popularity` number, float — Popularity score of the entity
  - `relationships` Relationships
    - `actors` RelatedEntity[] — Threat actors associated with this entity
      - `count` integer — Number of mentions linking this entity
      - `entity` EntityReference
        - `id` string — Unique identifier for the referenced entity
        - `label` string — Human-readable label
        - `type` string — Type of referenced entity
      - `entryIds` string[] — IDs of entries mentioning this relationship
      - `firstMention` string, date-time — Timestamp of first mention
      - `lastMention` string, date-time — Timestamp of most recent mention
    - `cyberAttacks` RelatedEntity[] — Cyber attacks associated with this entity
      - `count` integer — Number of mentions linking this entity
      - `entity` EntityReference
        - `id` string — Unique identifier for the referenced entity
        - `label` string — Human-readable label
        - `type` string — Type of referenced entity
      - `entryIds` string[] — IDs of entries mentioning this relationship
      - `firstMention` string, date-time — Timestamp of first mention
      - `lastMention` string, date-time — Timestamp of most recent mention
    - `malwares` RelatedEntity[] — Malware families associated with this entity
      - `count` integer — Number of mentions linking this entity
      - `entity` EntityReference
        - `id` string — Unique identifier for the referenced entity
        - `label` string — Human-readable label
        - `type` string — Type of referenced entity
      - `entryIds` string[] — IDs of entries mentioning this relationship
      - `firstMention` string, date-time — Timestamp of first mention
      - `lastMention` string, date-time — Timestamp of most recent mention
  - `stats` Statistics
    - `graph` object — Daily mention counts (date as key, count as value)
    - `lastMention` integer — Unix timestamp (milliseconds) of last mention
    - `numMentionsLast3Months` integer — Total mentions in the last 3 months
  - `type` 'indicatorOfCompromise' | 'threatActor' | 'malwareFamily' | 'vulnerability' — Type of entity

## Other responses

- `401` — Unauthorized - Invalid or missing API key
- `404` — Entity not found

---

[API](https://skmtc.net/feedly/apis/streams-api.md) · [All operations](https://skmtc.net/feedly/apis/streams-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/feedly/streams-api/versions/d38216a6d069/schema)